Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BFC15EB0A87111EFBB7C2F32C4F9AE02.roa
File: BFC15EB0A87111EFBB7C2F32C4F9AE02.roa (raw, json)
Hash identifier: BWuJLBjI6ktgvzPv45aNBwlgAYzYCpwKTMxplZpzqH0=
Subject key identifier: D6:92:6D:07:B2:46:95:03:2B:18:16:31:CE:3E:D1:4D:FC:36:39:F0
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6BF7
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BFC15EB0A87111EFBB7C2F32C4F9AE02.roa
Signing time: Mon 02 Mar 2026 23:31:40 +0000
ROA not before: Thu 28 Aug 2025 14:54:12 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 140810
IP address blocks: 103.77.172.0/23 maxlen: 23
103.77.214.0/23 maxlen: 23
103.77.240.0/23 maxlen: 23
103.77.246.0/23 maxlen: 23
103.78.0.0/23 maxlen: 23
103.116.38.0/23 maxlen: 23
103.141.140.0/23 maxlen: 23
103.155.216.0/24 maxlen: 24
103.176.108.0/23 maxlen: 24
103.178.234.0/23 maxlen: 23
103.213.218.0/23 maxlen: 23
103.214.8.0/22 maxlen: 22
103.238.234.0/23 maxlen: 23
103.252.136.0/23 maxlen: 23
223.130.10.0/23 maxlen: 23
2001:df4:c340::/48 maxlen: 48
2001:df4:d880::/48 maxlen: 48
2400:ece0::/48 maxlen: 48
2401:1960::/48 maxlen: 48
2401:2420::/48 maxlen: 48
2401:3660::/48 maxlen: 48
2401:36a0::/48 maxlen: 48
2401:3760::/48 maxlen: 48
2401:37a0::/48 maxlen: 48
2401:3f20::/48 maxlen: 48
2401:45a0::/48 maxlen: 48
2405:19c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27639 (0x6bf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:54:12 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a61ddc-953c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:40:77:b2:69:e9:71:eb:79:cf:11:a6:54:7a:
b0:88:13:d7:75:77:4d:72:f4:48:ac:f8:a8:bf:a0:
b7:09:62:74:7d:63:d1:58:9c:19:cb:0b:7a:85:fb:
69:68:bf:a1:8f:6a:1b:ad:09:a2:1e:b5:09:a4:54:
94:cd:8f:ab:27:39:4f:ed:6a:88:5b:b6:ab:62:45:
cf:de:47:a0:7e:72:09:ef:e1:ba:eb:cc:40:a1:0d:
5d:38:d4:5e:af:79:8a:c5:52:a7:30:b0:d2:41:1f:
d6:ba:d9:5b:74:c9:38:e2:b8:73:a0:be:76:23:83:
2f:d0:1b:2f:d3:a0:94:cf:4f:d9:94:c4:8e:78:79:
61:56:b1:dc:b3:dc:d9:f0:26:9d:48:e0:e0:c9:0f:
1a:38:60:87:60:1a:93:a8:08:74:3f:a4:9c:94:2b:
58:8e:b2:10:be:16:98:87:c8:09:7a:ae:b3:20:ad:
70:0a:26:6b:c6:93:9a:d7:35:36:b4:fb:46:55:14:
51:4a:70:39:52:d5:a9:24:b5:6a:c5:be:53:31:0b:
29:d5:1c:06:88:ce:a2:52:87:a5:92:9a:47:67:f3:
04:96:82:99:18:79:c1:cb:39:64:fe:80:88:2d:22:
e0:e2:b1:75:02:b6:73:b3:63:b0:13:36:90:d2:97:
78:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:92:6D:07:B2:46:95:03:2B:18:16:31:CE:3E:D1:4D:FC:36:39:F0
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BFC15EB0A87111EFBB7C2F32C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.77.172.0/23
103.77.214.0/23
103.77.240.0/23
103.77.246.0/23
103.78.0.0/23
103.116.38.0/23
103.141.140.0/23
103.155.216.0/24
103.176.108.0/23
103.178.234.0/23
103.213.218.0/23
103.214.8.0/22
103.238.234.0/23
103.252.136.0/23
223.130.10.0/23
IPv6:
2001:df4:c340::/48
2001:df4:d880::/48
2400:ece0::/48
2401:1960::/48
2401:2420::/48
2401:3660::/48
2401:36a0::/48
2401:3760::/48
2401:37a0::/48
2401:3f20::/48
2401:45a0::/48
2405:19c0::/32
Signature Algorithm: sha256WithRSAEncryption
30:57:5a:9e:6c:f0:e3:19:8b:3d:cc:10:7c:26:e3:17:07:08:
c4:08:c1:e0:ef:e0:ef:12:49:3a:bb:fd:f6:2c:b9:b9:e5:63:
a7:e6:d7:25:71:08:ef:eb:bd:1a:69:65:14:aa:55:90:59:50:
ae:62:4c:17:fa:7b:fd:1b:99:fb:70:83:63:d1:87:c2:60:62:
49:2f:a5:1b:e3:bb:a0:92:95:ca:4a:3d:26:2e:13:eb:83:39:
7e:7d:0b:07:de:a9:ef:ce:29:72:cc:37:70:0d:7a:66:e2:3d:
c8:23:6c:3b:6e:1f:5b:46:b6:d9:a7:b7:f3:76:3e:0a:a2:39:
cc:3e:cf:1d:2a:76:ad:57:d2:45:2b:22:ea:de:08:0d:35:ee:
b0:62:0a:dd:fd:46:4f:b2:09:c7:54:bf:57:30:5b:02:c6:da:
6a:7f:27:8d:e5:d3:a8:93:79:af:81:c7:76:b3:b4:e2:ff:aa:
8d:c1:d2:0f:1d:7d:b4:4c:5d:c0:2a:c3:8c:62:47:00:fa:56:
97:1f:2c:68:89:3a:52:f8:ad:0e:a7:78:d5:1d:60:96:4a:65:
f9:87:73:75:19:57:c1:54:f3:0f:75:6b:7c:f4:c2:d4:97:c9:
c6:a8:a3:65:63:ee:ae:9e:2c:aa:97:1e:f4:ff:4e:f5:72:70:
38:72:ce:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:46:26 2026 by rpki-client